PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8[.]rar | Triage

Resubmissions

21-02-2024 19:45

240221-ygpwbaed6y 10

21-02-2024 19:44

240221-yga26aeh56 3

Sharing

General

Target

PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8.rar
Size

1.9MB
MD5

b2fcd40069f2702a08154dbe8777e776
SHA1

0545f0252ddb52ae05af94e43faeac6798c098ec
SHA256

1a2d91d4583245bfd63a9b9da90337ba7d4527482c59e26225403500a5cd5379
SHA512

e83ed660eebe06cf290bb68c6247aec4d34f1c1779d6581806b42e7211749cf82fc25fa53c767fcfb672030f3d696bcdc5ab61f86ee95a031050bee8a26fe266
SSDEEP

49152:7L2lgzRXqTq4Du+71fgDdsuUWNLhj1QTWC9b+ZS:nJlXqpDZRYDyuUSLPMWr8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8/PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8.scr

Files

PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8.rar
.rar

Password: 55555
PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8/PrivateKey_15GECExQTVNM4XCVD8VsTbMFYFcfXh2wk8.scr
.exe windows:4 windows x86 arch:x86

Password: 55555

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ